Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lBRmpnFmS_7Z600XUiJKqG_udc.cer
File: 9lBRmpnFmS_7Z600XUiJKqG_udc.cer (raw, json)
Hash identifier: FqKOXVpFwwhPjc6ULLZbGq3rYDAer55qh0iNtLk55/g=
Subject key identifier: F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FA2BD5B4B001520121884FD2C95062
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 57399
IP: 176.98.96.0/20
Validation: Failed, certificate revoked on Tue 18 Apr 2023 12:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:2b:d5:b4:b0:01:52:01:21:88:4f:d2:c9:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f650519a99c5992ffb67ad345d48892aa1bfb9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:08:82:2d:b3:d2:2a:cd:54:1d:12:66:2d:
08:c5:47:80:22:78:80:a9:83:c2:12:dc:ac:6e:a7:
76:c5:db:a0:d8:75:f6:64:e1:6c:1a:40:21:49:a3:
60:be:bc:c1:cb:20:18:d6:e2:e2:2f:83:b8:a1:75:
97:d5:61:d6:e9:97:42:c2:b7:bf:7c:e5:89:32:d8:
95:0a:09:53:d9:03:e5:39:75:ff:d9:75:b5:1a:c1:
1a:80:6b:6d:7a:f5:64:b1:21:e4:0a:12:be:eb:0c:
d8:c1:82:ad:ca:90:ce:8a:83:79:62:3f:2c:40:0b:
a2:0b:bf:be:40:3b:88:91:9a:59:ed:72:d4:8c:1f:
57:ee:e0:d5:6d:98:fe:a5:c3:b8:45:76:a4:d3:0a:
30:5a:d5:97:90:cf:fe:29:ed:0b:0e:a2:7b:a3:9c:
7e:01:27:c5:f9:a0:32:e8:f9:3b:91:61:28:e4:c3:
8b:6c:eb:63:31:64:a1:df:bc:af:d5:bb:15:1b:8b:
82:2a:e5:ea:a4:56:7c:5b:c0:85:ad:42:fa:0b:cb:
26:61:28:37:e4:4f:13:2c:17:67:12:19:87:0c:26:
07:3e:2f:c0:43:ed:eb:7c:8c:30:52:2d:e6:af:ab:
64:44:42:27:55:38:aa:02:0f:8e:6e:f4:9a:46:c4:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:51:9A:99:C5:99:2F:FB:67:AD:34:5D:48:89:2A:A1:BF:B9:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/bbe96c-6021-4726-a367-375f2bc1e87d/1/9lBRmpnFmS_7Z600XUiJKqG_udc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.96.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57399
Signature Algorithm: sha256WithRSAEncryption
16:66:e0:04:53:c7:97:be:3a:2b:41:c1:af:7e:be:0b:dd:7e:
a2:54:2f:91:f7:ac:ff:b6:b7:bc:28:ff:d4:3c:21:72:45:3a:
82:3c:d6:7e:90:d4:7b:38:97:67:5b:31:0d:3e:64:f6:11:4d:
be:f9:2c:b0:ac:20:06:3e:6a:bd:d2:09:9c:b1:eb:e9:0e:72:
6c:8d:f6:d3:91:7b:20:e0:bf:c2:3f:78:5e:0b:5f:db:48:e5:
a0:a0:b8:76:6b:e4:fd:7b:b7:64:a9:c3:8c:21:76:7f:0e:ae:
f2:d8:3e:2a:64:a7:40:b8:12:56:3d:03:6c:17:7c:b9:40:e8:
da:2f:83:30:b4:86:aa:73:e3:c4:ee:99:de:a7:af:ed:f9:a2:
ac:5e:4d:8f:30:40:88:eb:0c:b1:10:5e:cc:b2:8f:51:ac:5d:
72:83:43:b8:b4:ee:15:65:e7:af:6e:22:6f:69:8d:eb:db:8e:
17:cc:85:d8:83:0b:3a:d9:1d:e0:bf:de:75:73:9c:87:7c:ce:
95:f2:39:c3:0c:64:08:c0:e9:d1:a1:56:fb:11:58:e4:54:36:
5c:da:ea:ed:e9:5f:f2:cc:7c:e3:0f:19:0e:d5:f8:be:47:21:
63:28:46:39:b4:06:86:c2:97:8c:48:72:20:d2:b2:c3:43:6f:
93:3e:88:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:42 2024 by rpki-client on console-ams.rpki-client.org